CVE-2026-96418
published 2026-09-29CVE-2026-96418: TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
PriorityP419medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.14%
2.7th percentile
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.19 | 4.4.19 |
| wireshark | wireshark | >= 4.6.0 < 4.6.9 | 4.6.9 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.19 | 4.4.19 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.9 | 4.6.9 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
vendor_gitlab·2026-09-29·CVSS 5.5
CVE-2026-96418 [MEDIUM] CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.19 (affected)
Solution: Upgrade to version 4.6.9 or above
Credit: Credit: Claude and Ada Logics
Red Hat
wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector
vendor_redhat·2026-09-29·CVSS 5.5
CVE-2026-96418 [MEDIUM] CWE-835 wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector
wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector
A flaw was found in Wireshark. By convincing a user to open a specially crafted packet capture containing Tagged Image File Format (TIFF) data, an attacker can trigger an infinite loop in the TIFF protocol dissector. This issue causes the application to hang and become unresponsive, resulting in a Denial of Service (DoS).
Mitigation: Disable the TIFF protocol dissector in Wireshark or tshark to prevent processing of malformed TIFF packets:
1. In the Wireshark GUI:
Navigate to Analyze -> Enabled Protocols..., search for "TIFF", uncheck the entry, and click OK.
2. When using the command-line utility tshark:
Append the `--disable-protocol tiff` option to the command:
tshark --disable-protocol tiff -r
Caveat
VulDB
Wireshark up to 4.4.18/4.6.8 TIFF Dissector infinite loop (Nessus ID 362908)
vuldb·2026-10-05·CVSS 5.5
CVE-2026-96418 [MEDIUM] Wireshark up to 4.4.18/4.6.8 TIFF Dissector infinite loop (Nessus ID 362908)
A vulnerability, which was classified as problematic, was found in Wireshark up to 4.4.18/4.6.8. This impacts an unknown function of the component TIFF Dissector. Such manipulation leads to infinite loop.
This vulnerability is documented as CVE-2026-96418. The attack needs to be performed locally. There is not any exploit available.
You should upgrade the affected component.
GHSA
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-09-29
CVE-2026-96418 [MEDIUM] CWE-835 TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-96418 wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector [fedora-all]
bugzilla·2026-09-29·CVSS 5.5
CVE-2026-96418 [MEDIUM] CVE-2026-96418 wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector [fedora-all]
CVE-2026-96418 wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Bugzilla
CVE-2026-96418 wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector
bugzilla·2026-09-29·CVSS 5.5
CVE-2026-96418 [MEDIUM] CVE-2026-96418 wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector
CVE-2026-96418 wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
2026-09-29
Published